HTTP Request Smuggling

🗓️ 05 May 2025 11:08:05Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

h11 is vulnerable to HTTP Request Smuggling due to improper input validation in chunked encoding.

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: IBM Fusion and IBM Fusion HCI are vulnerable to request smuggling due to python package h11 (CVE-2025-43859)	17 Jun 202517:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF006	6 Aug 202515:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	30 Jul 202517:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in h11-0.14.0-py3-none-any.whl	26 Sep 202511:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in h11-0.14.0-py3-none-any.whl CVE-2025-43859	22 Oct 202510:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	11 Jun 202513:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Code Assistant On Prem product affected by h11 HTTP Chunk Handling Vulnerability	15 Sep 202514:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies.	20 May 202511:48	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to request smuggling due to the h11 package (CVE-2025-43859).	11 Aug 202522:07	–	ibm
AstraLinux	Astra Linux - уязвимость в python-h11	16 Jun 202511:28	–	astralinux

Vulners

Node

h11 h11Range0.5.0–0.15.0python

h11 h11Match0.0.1python

h11 h11Match0.10.0python

h11 h11Match0.11.0python

h11 h11Match0.12.0python

h11 h11Match0.13.0python

h11 h11Match0.14.0python

h11 h11Match0.5.0python

h11 h11Match0.6.0python

h11 h11Match0.7.0python

h11 h11Match0.8.0python

h11 h11Match0.8.1python

h11 h11Match0.9.0python

Source	Link
github	www.github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-43859
github	www.github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj
github	www.github.com/python-hyper/h11

13 Dec 2025 08:02Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.1

EPSS0.00202

SSVC